feat: add Secret controller

Author: kharkevich

artifacts/crd.yaml

@@ -124,3 +124,47 @@ spec:
     kind: GHS
     shortNames:
       - ghs
+
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: secrets.githubapp.technicaldomain.xyz
+spec:
+  group: githubapp.technicaldomain.xyz
+  versions:
+    - name: v1
+      served: true
+      storage: true
+      schema:
+        openAPIV3Schema:
+          type: object
+          properties:
+            spec:
+              type: object
+              properties:
+                privateKeySecret:
+                  type: string
+                secrets:
+                  type: array
+                  items:
+                    type: object
+                    properties:
+                      secret:
+                        type: string
+                      namespace:
+                        type: string
+            status:
+              type: object
+              properties:
+                token:
+                  type: string
+      subresources:
+        status: {}
+  scope: Namespaced
+  names:
+    plural: secrets
+    singular: secret
+    kind: Secret
+    shortNames:
+      - sec

artifacts/example.yaml

@@ -8,17 +8,17 @@ spec:
   argoCDRepositories:
     - repository: repo-1294444111
       namespace: argocd
-# ---
-# apiVersion: githubapp.technicaldomain.xyz/v1
-# kind: ArgoCDRepo
-# metadata:
-#   name: example-argo-another-github-app
-#   namespace: default
-# spec:
-#   privateKeySecret: github-app-private-key
-#   argoCDRepositories:
-#     - repository: repo-1294444122
-#       namespace: argocd
+---
+apiVersion: githubapp.technicaldomain.xyz/v1
+kind: ArgoCDRepo
+metadata:
+  name: example-argo-another-github-app
+  namespace: default
+spec:
+  privateKeySecret: github-app-private-key
+  argoCDRepositories:
+    - repository: repo-1294444122
+      namespace: argocd
 ---
 apiVersion: githubapp.technicaldomain.xyz/v1
 kind: DockerConfigJson
@@ -30,3 +30,18 @@ spec:
   dockerConfigSecrets:
     - secret: ghcr
       namespace: argocd
+      registry: ghcr.io
+      username: x-access-token
+---
+apiVersion: githubapp.technicaldomain.xyz/v1
+kind: Secret
+metadata:
+  name: github-secret
+  namespace: default
+spec:
+  privateKeySecret: github-app-private-key
+  secrets:
+    - secret: ghs-app-token
+      namespace: argocd
+    - secret: ghs-app2-token
+      namespace: default

controller_ghs.go

@@ -1,3 +1,19 @@
+/*
+Copyright 2025 Alexander Kharkevich.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
 package main
 
 import (